Unknown To Do List Member

2 known vulnerabilities in Unknown To Do List Member, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-86802 CVSS 3.7 low The To Do List Member WordPress plugin through 1.6 does not have authorisation or nonce checks in an import routine, and does not validate…
CVE-2026-86801 CVSS 8.8 high The To Do List Member WordPress plugin from 1.4 through 1.6 ships a file upload endpoint that does not load WordPress and therefore…